Security Advisory
CVE-2026-17039
3.1
LOW
Vulnerability Description
A flaw was found in pki-core. The certificate authority (CA) renewal request path does not perform the realm-based authorization check that the enrollment path performs, allowing an authenticated user entitled to one realm to cause a certificate belonging to a different realm to be renewed without that realm's authorization.
Published Date
July 24, 2026
Official Source
NIST NVD Advisory